Scott Zimmerman

About Scott Zimmerman

I am currently the Chief Information & Security Officer at Concurrent Technologies Corporation in Johnstown, PA with over 30 years of IT and Cyber Security experience. I am a Certified Information Systems Security Professional (CISSP); Information Systems Security Engineering Professional (ISSEP) and Certified CMMC Professional (CCP). I have an extensive background in Cybersecurity, Cybersecurity Compliance, Network Communication Systems, and Cloud Computing. My education includes a BS in Management Information Systems and AS in Electronic/Computer Technology.• Experienced utilizing cybersecurity engineering principles and processes to develop secure systems. • Experience with many popular cybersecurity systems and tools • Extensive experience implementing DOD, federal and private industry cyber standards (NIST 800-171, Cybersecurity Maturity Model Certification (CMMC), RMF, NIST 800-53, 171, FedRAMP)• Vulnerability and security posture assessments (federal government and commercial)• Cybersecurity management strategy, program and budget development• Strong background in business development, project management, marketing and technical pre-sales• Experienced public speaker • Published technical author

Experience

1. Chief Information Security Officer

   Concurrent Technologies Corporation

   Aug 2018 — Present

   As CISO I am responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This includes identifying, developing, implementing, and maintaining processes across the enterprise to reduce information and information technology (IT) risks. I am also responsible for the company achieving cyber compliance within the US Government and the US DoD.(FAR/DFARS rules, NIST SP 800-171, and Cybersecurity Maturity Model Certification (CMMC). As CIO I work with corporate leadership in the development, implementation and management of a strategic 5 year IT roadmap. This includes the identification of appropriate information technology solutions that provide the company a technological advantage and, consistent with the strategic and fiscal goals of the company.

Education

• Kennedy Western

  BS, Management Information Systems

  1996 — 1998

• Massachusetts Institute of Technology

  Takling the Challenges of Big Data

  2014 — 2015

• DePaul University

  Big Data Analytics with Hadoop

  2014 — 2014

• DePaul University

  Cloud Computing Technologies

  2013 — 2013

• Electronic Institute

  AS, Electronic/Computer Technology

  1981 — 1983

• Cybrary

  NIST Risk Management Framework

  2016

• AWS Training

  Architecting with Amazon Web Services

  2013 — 2013

• DePaul University

  Big Data and NoSQL

  2013 — 2013

Skills

• Networking
• Integration
• Vulnerability Management
• Accreditation
• Cloud Computing
• Linux
• Information Security Management
• Dod
• Proposal Writing
• Databases
• Disaster Recovery
• Cissp
• Software as a Service (Saas)
• Network Engineering
• Data Center
• Issep
• Hand Model
• Network Security
• Strategic Planning
• Information Assurance
• Network Administration
• Project Management
• Technical Leadership
• Chef
• Security
• Enterprise Architecture
• Direct Digital Manufacturing
• Leadership
• Cyber Security
• Race Car Driver
• Information Technology
• Network Design
• Security Clearance
• Configuration Management
• Cloud Security
• Saas
• Penetration Testing
• Hadoop
• Systems Engineering
• Computer Security